Tuesday, 2015-08-18

*** ankita_wagh has joined #openstack-keystone00:02
*** ankita_w_ has quit IRC00:05
*** fangzhou has quit IRC00:10
*** Ctina_ has quit IRC00:11
*** geoffarnold has quit IRC00:17
*** shadower has quit IRC00:23
*** shadower has joined #openstack-keystone00:23
*** tqtran has quit IRC00:25
*** woodster_ has quit IRC00:30
*** dims has joined #openstack-keystone00:34
*** topol has joined #openstack-keystone00:45
*** ChanServ sets mode: +v topol00:45
*** sigmavirus24 is now known as sigmavirus24_awa00:49
*** topol has quit IRC00:49
*** shoutm has quit IRC00:51
*** piyanai has joined #openstack-keystone00:53
*** roxanaghe has quit IRC00:56
*** fangzhou has joined #openstack-keystone01:01
*** ankita_wagh has quit IRC01:03
*** ctina has quit IRC01:03
*** ankita_wagh has joined #openstack-keystone01:03
*** shoutm has joined #openstack-keystone01:04
*** ctina has joined #openstack-keystone01:05
*** ctina has quit IRC01:06
*** ctina has joined #openstack-keystone01:07
*** ankita_wagh has quit IRC01:08
openstackgerritMerged openstack/keystone: Maintain the expiry of v2 fernet tokens  https://review.openstack.org/19647501:12
openstackgerritMerged openstack/keystone: Do not require the token_id for converting v3 to v2 tokens  https://review.openstack.org/19647601:15
*** tiny-hands has quit IRC01:20
*** tiny-hands has joined #openstack-keystone01:21
*** ankita_wagh has joined #openstack-keystone01:22
*** ankita_wagh has quit IRC01:23
*** ankita_wagh has joined #openstack-keystone01:23
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/21389301:26
openstackgerritBrant Knudson proposed openstack/keystone: Remove unnecessary load_backends from TestKeystoneTokenModel  https://review.openstack.org/21380101:36
*** _cjones_ has quit IRC01:37
*** fangzhou_ has joined #openstack-keystone01:37
*** fangzhou has quit IRC01:38
*** fangzhou_ is now known as fangzhou01:38
*** browne has quit IRC01:41
*** Kennan2 has joined #openstack-keystone02:02
*** Kennan has quit IRC02:03
*** piyanai has quit IRC02:12
*** piyanai has joined #openstack-keystone02:13
*** davechen has joined #openstack-keystone02:14
*** shoutm has quit IRC02:18
*** shoutm has joined #openstack-keystone02:20
*** ankita_wagh has quit IRC02:21
*** jasonsb_ has quit IRC02:22
*** piyanai has quit IRC02:22
*** dims has quit IRC02:30
*** tiny-hands has quit IRC02:30
*** piyanai has joined #openstack-keystone02:37
openstackgerritalgerwang proposed openstack/keystone: Update 'doc/source/setup.rst'.  https://review.openstack.org/21397902:40
*** shoutm has quit IRC02:44
*** browne has joined #openstack-keystone02:46
*** hakimo has joined #openstack-keystone02:52
*** hakimo_ has quit IRC02:54
openstackgerritalgerwang proposed openstack/keystone: Update 'doc/source/setup.rst'.  https://review.openstack.org/21397902:55
*** shoutm has joined #openstack-keystone03:01
*** fangzhou has quit IRC03:01
*** fangzhou has joined #openstack-keystone03:04
*** jasonsb has joined #openstack-keystone03:07
openstackgerritHaneef Ali proposed openstack/keystone: Return correct URL in /v3 version response  https://review.openstack.org/21337903:07
*** fangzhou has quit IRC03:19
stevemarayoung: tag teamed with you on the mailing list03:20
ayoungstevemar, I love how people think we are doing this deliberately03:20
stevemarayoung: yeah, that's what gets me03:21
stevemari tried to page through pages/groups for our internal LDAP, i got denied03:21
ayoungstevemar, I'm tempted to say "please submit patches so I can -2 them:03:21
stevemarerr... users/groups03:21
stevemarhehe03:21
stevemarI guess the argument is for the stuff we store in SQL (projects/domains/roles)03:22
ayoungstevemar, when you hit the default page in IPA, it shows you a list of users...I hate that it does that03:22
stevemari noticed that03:22
ayoungstevemar, no, they want it for users03:22
*** piyanai has quit IRC03:22
ayoungI mean, nothing else requires paging03:22
stevemarayoung: refer to david-lyle's latest reply03:22
stevemarayoung: http://openstack.markmail.org/search/?q=keystone#query:keystone%20list%3Aorg.openstack.lists.openstack-dev%20order%3Adate-backward+page:1+mid:xe4try7myn2jv2m6+state:results03:22
stevemari already replied03:23
*** ankita_wagh has joined #openstack-keystone03:37
*** markvoelker has quit IRC03:42
*** ankita_wagh has quit IRC03:42
*** ankita_wagh has joined #openstack-keystone03:42
openstackgerritMerged openstack/keystone: Updated from global requirements  https://review.openstack.org/21389303:50
*** ngupta has quit IRC03:59
*** shoutm has quit IRC04:00
*** piyanai has joined #openstack-keystone04:02
*** lhcheng has quit IRC04:06
*** shoutm has joined #openstack-keystone04:06
*** piyanai has quit IRC04:08
*** mylu has joined #openstack-keystone04:09
*** mylu has quit IRC04:21
*** ayoung has quit IRC04:25
*** shoutm_ has joined #openstack-keystone04:27
*** lhcheng has joined #openstack-keystone04:28
*** ChanServ sets mode: +v lhcheng04:28
*** shoutm has quit IRC04:28
*** kiran-r has joined #openstack-keystone04:32
*** kiran-r has quit IRC04:37
*** markvoelker has joined #openstack-keystone04:42
*** mylu has joined #openstack-keystone04:42
*** dave-mccowan has quit IRC04:47
*** markvoelker has quit IRC04:47
*** fangzhou has joined #openstack-keystone04:54
*** mestery has joined #openstack-keystone04:59
*** Navid_ has joined #openstack-keystone04:59
*** shoutm_ has quit IRC05:03
*** gyee has quit IRC05:04
*** Navid__ has joined #openstack-keystone05:06
*** mestery has quit IRC05:09
*** Navid_ has quit IRC05:10
*** dims has joined #openstack-keystone05:20
*** topol has joined #openstack-keystone05:22
*** ChanServ sets mode: +v topol05:22
*** dims has quit IRC05:26
*** topol has quit IRC05:27
*** fangzhou_ has joined #openstack-keystone05:27
*** fangzhou has quit IRC05:28
*** fangzhou_ is now known as fangzhou05:28
*** shoutm has joined #openstack-keystone05:34
*** lsmola has joined #openstack-keystone05:39
openstackgerritDave Chen proposed openstack/keystone: Remove unnessary check  https://review.openstack.org/21400905:56
*** Nirupama has joined #openstack-keystone05:59
*** shoutm has quit IRC06:05
*** shoutm has joined #openstack-keystone06:12
*** urulama has quit IRC06:18
*** urulama has joined #openstack-keystone06:19
*** hrou has quit IRC06:22
*** stevemar has quit IRC06:29
*** mylu has quit IRC06:35
*** mylu has joined #openstack-keystone06:36
*** shoutm_ has joined #openstack-keystone06:39
*** mylu has quit IRC06:40
*** shoutm has quit IRC06:42
*** rm_work is now known as rm_work|away06:42
*** openstackgerrit_ has joined #openstack-keystone06:43
*** markvoelker has joined #openstack-keystone06:43
*** markvoelker has quit IRC06:48
*** ankita_wagh has quit IRC06:57
*** mylu has joined #openstack-keystone06:57
*** mylu has quit IRC06:58
*** browne has quit IRC07:04
*** Navid_ has joined #openstack-keystone07:06
*** Navid__ has quit IRC07:09
*** henrynash has quit IRC07:12
*** dguerri` is now known as dguerri07:13
*** rm_work|away is now known as rm_work07:14
*** dguerri is now known as dguerri`07:16
*** dguerri` is now known as dguerri07:24
*** browne has joined #openstack-keystone07:29
*** stevemar has joined #openstack-keystone07:30
*** ChanServ sets mode: +v stevemar07:30
*** dguerri is now known as dguerri`07:32
*** dguerri` is now known as dguerri07:32
*** stevemar has quit IRC07:34
*** lhcheng has quit IRC07:35
*** dguerri is now known as dguerri`07:39
*** yottatsa has joined #openstack-keystone07:42
davechenmerekd_404: hi,07:44
davechenmerekd_404: are you around?07:44
davechenJust found the APIs in federation don't have  schema validation, is this intentional behavior?07:46
davechensuch as 'create_mapping',  'create_identity_provider', anyone knows?07:48
*** dims has joined #openstack-keystone07:48
*** Navid__ has joined #openstack-keystone07:49
*** Navid_ has quit IRC07:52
*** dims has quit IRC07:53
*** bradjones has quit IRC07:53
*** jistr has joined #openstack-keystone07:55
*** bradjones has joined #openstack-keystone07:56
*** bradjones has quit IRC07:56
*** bradjones has joined #openstack-keystone07:56
*** browne has quit IRC07:57
*** fhubik has joined #openstack-keystone07:57
*** yottatsa has quit IRC08:02
*** pnavarro has joined #openstack-keystone08:08
*** Navid_ has joined #openstack-keystone08:12
*** Navid__ has quit IRC08:15
*** yottatsa has joined #openstack-keystone08:27
*** yottatsa has quit IRC08:27
*** yottatsa has joined #openstack-keystone08:32
*** Navid_ has quit IRC08:36
marekd_404davechen: it;s not intentional, i think Lance was working on it, so he might have by mistake skip it.08:37
marekd_404davechen: feel free to work on it, if you have time :-) I will for sure review.08:38
marekd_404davechen: and i kind of not here until Thursday :-)08:38
*** markvoelker has joined #openstack-keystone08:45
*** shoutm_ has quit IRC08:48
*** markvoelker has quit IRC08:50
davechenmarekd_404: I think you are lost, your nick name is funny. :)08:55
davechenmarekd_404: basically, most of the entities in the contrib module skip this validation.08:55
*** yottatsa has quit IRC08:55
*** fhubik is now known as fhubik_brb08:55
davechenI am going to register a BP and possbily clean all these up in the 'M'.08:56
*** fhubik_brb is now known as fhubik08:56
*** fhubik is now known as fhubik_brb08:58
davechenmarekd_404: btw, thanks for the information, will add you as the reviwers if you don't mind, have a good day!08:58
*** shikel has quit IRC09:01
*** sh1kel has joined #openstack-keystone09:06
*** fhubik_brb is now known as fhubik09:17
*** stevemar has joined #openstack-keystone09:31
*** ChanServ sets mode: +v stevemar09:31
*** stevemar has quit IRC09:35
*** afazkas has joined #openstack-keystone09:42
*** davechen has left #openstack-keystone09:54
*** tiny-hands has joined #openstack-keystone09:55
*** fhubik is now known as fhubik_brb09:56
*** tiny-hands has quit IRC10:00
*** fhubik_brb is now known as fhubik10:01
*** Tedster has quit IRC10:04
*** fhubik has quit IRC10:05
*** fhubik has joined #openstack-keystone10:06
*** fhubik_ has joined #openstack-keystone10:06
*** pgbridge has quit IRC10:15
*** Tedster has joined #openstack-keystone10:15
*** fhubik is now known as fhubik_brb10:16
*** pgbridge has joined #openstack-keystone10:17
*** henrynash has joined #openstack-keystone10:25
*** ChanServ sets mode: +v henrynash10:25
*** shoutm has joined #openstack-keystone10:27
*** kiran-r has joined #openstack-keystone10:36
*** hafe has joined #openstack-keystone10:43
*** markvoelker has joined #openstack-keystone10:46
*** tiny-hands has joined #openstack-keystone10:47
*** sh1kel has quit IRC10:48
*** markvoelker has quit IRC10:50
*** dims has joined #openstack-keystone10:51
openstackgerrithenry-nash proposed openstack/keystone: Support project hierarchies in data driver tests  https://review.openstack.org/15448510:52
*** tiny-hands has quit IRC10:52
*** henrynash has quit IRC10:56
*** _kiran_ has joined #openstack-keystone11:07
*** topol has joined #openstack-keystone11:09
*** ChanServ sets mode: +v topol11:09
*** yottatsa has joined #openstack-keystone11:11
*** kiran-r has quit IRC11:11
*** _kiran_ has quit IRC11:12
*** topol has quit IRC11:14
*** dims_ has joined #openstack-keystone11:28
*** dims has quit IRC11:30
*** stevemar has joined #openstack-keystone11:32
*** ChanServ sets mode: +v stevemar11:32
*** stevemar has quit IRC11:35
*** Protux has quit IRC11:39
*** ramishra has quit IRC11:40
*** piyanai has joined #openstack-keystone11:41
*** gordc has joined #openstack-keystone11:45
*** markvoelker has joined #openstack-keystone11:46
*** henrynash has joined #openstack-keystone11:47
*** ChanServ sets mode: +v henrynash11:47
*** dikonoor has joined #openstack-keystone11:47
*** dikonoo has joined #openstack-keystone11:48
*** dikonoor has quit IRC11:48
*** yottatsa has quit IRC11:49
*** topol has joined #openstack-keystone11:49
*** ChanServ sets mode: +v topol11:49
*** yottatsa has joined #openstack-keystone11:50
*** markvoelker has quit IRC11:51
openstackgerrithenry-nash proposed openstack/keystone: Remove manager-driver assignment metadata construct  https://review.openstack.org/14899511:58
*** samueldmq has joined #openstack-keystone12:00
*** dims has joined #openstack-keystone12:00
samueldmqmorning12:00
*** dims has quit IRC12:00
*** dims_ has quit IRC12:00
*** dims has joined #openstack-keystone12:01
*** topol has quit IRC12:05
*** dims has quit IRC12:05
samueldmqdstanek, hi12:05
*** topol has joined #openstack-keystone12:05
*** ChanServ sets mode: +v topol12:05
*** petertr7_away is now known as petertr712:09
*** topol has quit IRC12:10
*** markvoelker has joined #openstack-keystone12:12
*** pnavarro is now known as pnavarro|lunch12:14
*** fhubik_ has quit IRC12:15
*** fhubik_brb has quit IRC12:15
*** dims has joined #openstack-keystone12:15
*** fhubik has joined #openstack-keystone12:15
*** piyanai has quit IRC12:17
*** fhubik is now known as fhubik_brb12:17
openstackgerrithenry-nash proposed openstack/keystone: Support project hierarchies in data driver tests  https://review.openstack.org/15448512:18
*** raildo-afk is now known as raildo12:18
samueldmqhenrynash, oh, I hadn't noticed that list role assignments performance patch had merged last week12:23
henrynashsamueldmq: yahhhh!!!12:23
samueldmqhenrynash, that's just .. :')12:23
*** dave-mccowan has joined #openstack-keystone12:23
samueldmqhenrynash, finally (that deserves a beer at Tokyo) o/12:23
henrynashsamueldmq: yep!  Well done12:24
samueldmqhenrynash, thanks, you too, for all the updates and patience :)12:24
henrynashsamueldmq: np12:24
samueldmqhenrynash, I will give those data-driven tests another pass12:26
henrynashsamueldmq: just about to update them with a minor change….12:27
samueldmqhenrynash, so we can get them merged as well, gonna put in my priority list for reviews :)12:27
samueldmqhenrynash, nice12:27
henrynashsamuelmqL haev expanded the support12:27
samueldmqhenrynash, to be generic ?12:28
henrynashsamaueldmq: haev expanded the support for hierarchies (so you can have multiple branches)…and I will wrtite one for the new is_domain project12:28
henrynashsamueldmq: still working on it, actually…not quite done12:29
samueldmqhenrynash, hmm, that's nice12:29
samueldmqhenrynash, np, I will review them today (as gyee's endpoint enforcement patch as well)12:30
samueldmqhenrynash, I feel that I should be reviewing more, but it's hard when you are too involved implementing somethign (like dynamic policies) :/12:30
henrynashsamuedlmq: understand12:32
*** samueldmq has quit IRC12:37
*** Nirupama has quit IRC12:38
rodrigodshenrynash, https://review.openstack.org/#/c/213273/ :)12:39
dstaneksamueldmq: hey12:41
*** dims_ has joined #openstack-keystone12:41
*** dims has quit IRC12:41
*** ctina has quit IRC12:43
*** ctina has joined #openstack-keystone12:43
dstanekgrrr... up to 316 bugs today12:46
*** edmondsw has joined #openstack-keystone12:47
*** samueldmq has joined #openstack-keystone12:48
dstaneksamueldmq: hey12:48
samueldmqdstanek, o/12:48
samueldmqdstanek, morning, so I'd like to discuss somethign with you :)12:49
dstaneksamueldmq: fire away12:49
dstaneksamueldmq: i agree that reviewing patches while developing is hard!12:49
openstackgerritDavid Stanek proposed openstack/keystone: Remove unnecessary check  https://review.openstack.org/21400912:49
samueldmqdstanek, so first thanks for your review on 'list role assignments filter performance', almost 1 year to get merged ..12:50
samueldmqdstanek, and it got merged last week o/12:50
samueldmqdstanek, yes, that's hard, but I think that's time to exercise, to I review other's work, and they will get time to review mine, if that makes sense12:50
samueldmqdstanek, so .. what I wanted to talk ...12:51
*** chlong has joined #openstack-keystone12:52
samueldmqdstanek, in our current implementation, policy distribution vary depending in the endpoint_id12:52
samueldmqdstanek, (actually it is in the policy_id right now, but that's what I am changing)12:52
samueldmqdstanek, so.. the question is : should the endpoint_policy controller calculate the policy freshness ? or should it be the policy manager (as today)?12:53
samueldmqdstanek, I think manager is better because it contains the business logic, but it hasn't access to the endpoint_id, should the endpoint_policy controller pass the endpoint_id to poicy manager?12:54
samueldmqdstanek, or should hte endpoint_policy controller calculate it?12:54
dstaneksamueldmq: do you have a link to the code you are talking about?12:55
samueldmq... (sorry for writing a thousand lines)12:55
samueldmqdstanek, yes, https://review.openstack.org/#/c/212960/ and the next one in the chain12:56
dstaneksamueldmq: i'm not sure in this case since what you are doing isn't something i have ever seen before - i'd have to think about the implications12:58
dstaneksamueldmq: generally speaking the caching rules should be at the controller level since they are an HTTP concern12:59
*** topol has joined #openstack-keystone12:59
*** ChanServ sets mode: +v topol12:59
dstaneksamueldmq: what cache are you updating in that review?13:00
samueldmqdstanek, hm, makes sense13:00
samueldmqdstanek, how do I calculate the freshness of a given policy ?13:00
samueldmqdstanek, or what header I am putting in the response ?13:01
*** dims has joined #openstack-keystone13:01
dstaneksamueldmq: your commit messages are confusing. you mention HTTP headers, but your not doing anything like that13:02
*** dims_ has quit IRC13:02
*** topol has quit IRC13:03
samueldmqdstanek, ok so what I tried to do is:13:03
samueldmqdstanek, i) what's the goal at the end of the chain ii) what were the previous patches in the chain iii) what this patch does iv) what are the next patches13:04
samueldmqdstanek, maybe that isn't a good approach, maybe I just wrote them bad13:04
dstaneksamueldmq: just limit your commit message the the functionality in the patch. we can use the bp links to put the chain back together13:04
samueldmqdstanek, k makes sense13:05
samueldmqdstanek, I also split the patches into (model - driver - manager - controller - wsgi) changes, adding tests to each level at their respective patches13:06
*** henrynash has quit IRC13:06
dstaneksamueldmq: you don't need to spit them by file, just split them by logical functionality13:06
dstaneksamueldmq: realistically a patch should makes sense of it's own even if it is part of a larger set of changes13:07
samueldmqdstanek, I am afraid to have big patches and make them bad to review13:07
samueldmqdstanek, and yes, I believe those patches make sense separate13:07
samueldmqdstanek, since each level provides capabilities in separate patches, so in one I add some capabilities to driver, in another to manager, and so on13:08
samueldmqif that makes sense13:08
samueldmqdstanek, however I am open if you have a suggestion :)13:13
dstaneksamueldmq: what cache is that patch updating?13:14
samueldmqdstanek, the last patch, in the applicaiton level (wsgi) is adding the 'Cache-Control: max-age:(value)'13:14
samueldmqdstanek, the others are calculating/building the value to be put there13:14
*** dims_ has joined #openstack-keystone13:15
dstaneksamueldmq: so there is an application level cache too?13:15
samueldmqdstanek, starting from the db strategy (new table) to the freshness calculation (manager)13:15
samueldmqdstanek, no, there is only 1 cache13:15
dstaneksamueldmq: is the db table the cache you are referring to?13:15
samueldmqdstanek, that will be set in the http response at the end13:15
*** yottatsa has quit IRC13:16
*** yottatsa has joined #openstack-keystone13:16
samueldmqdstanek, the db table will contain a policy entity + valid_to, that's all13:16
*** yottatsa has quit IRC13:16
dstaneksamueldmq: "This patch adds to the policy manager the logic to13:16
dstanekcalculate the validity of policy entities and13:16
dstanekto update their cache, if expired."13:16
*** dims has quit IRC13:17
*** yottatsa has joined #openstack-keystone13:17
samueldmqdstanek, yes, that cache is the db, updating the valid_to field in the db13:17
samueldmqdstanek, ok so I am going to improve the commit messages by only saying what the current patch does + how it interact with others (e.g how manager uses the driver, and what it will return to the controller)13:19
*** cburgess has quit IRC13:23
*** hafe1 has joined #openstack-keystone13:23
*** hrou has joined #openstack-keystone13:25
dstaneksamueldmq: sorry got disconnected :-(13:25
samueldmqdstanek, np13:25
*** cburgess has joined #openstack-keystone13:26
samueldmqdstanek, should we talk about the herd problem you pointed out last week in the meeting today ?13:26
*** hafe has quit IRC13:26
dstaneksamueldmq: i would call out that you are talking about the DB table in that message13:26
dstaneksamueldmq: to what end?13:27
samueldmqdstanek, yes, I will add that to the message, to be more specific13:27
samueldmqdstanek, to have more people aware of the concern, and help somehow, don't know13:28
samueldmqdstanek, or should we juts listen from the operators?13:28
dstaneksamueldmq: we need to know the operator's thoughts on using HTTP and the possible inconsistencies before we can design a solution13:29
dstaneksamueldmq: if you want to let others know that the current design isn't scalable then that's fine. i don't think we need to waste too much time on it though13:30
*** dims_ has quit IRC13:31
*** dims has joined #openstack-keystone13:31
*** ayoung has joined #openstack-keystone13:31
*** ChanServ sets mode: +v ayoung13:31
samueldmqdstanek, so maybe that's just unecessary13:32
samueldmqunnecessary*13:33
samueldmqdstanek, let's see what we listen from operators this week (need ot check with gyee)13:33
samueldmqdstanek, do you know the days of this week the operators meetup's gonna happen ?13:34
dstanektoday for sure, otherwise no idea13:34
openstackgerritLance Bragstad proposed openstack/keystone: Additional documentation for services  https://review.openstack.org/21118413:35
samueldmqdstanek, got it13:36
*** dims has quit IRC13:40
*** dims has joined #openstack-keystone13:43
*** csoukup has joined #openstack-keystone13:44
*** browne has joined #openstack-keystone13:45
*** fhubik_brb is now known as fhubik13:47
*** fhubik has quit IRC13:50
*** yottatsa has quit IRC13:51
*** ngupta has joined #openstack-keystone13:52
openstackgerritHenrique Truta proposed openstack/keystone: Change project name constraints  https://review.openstack.org/15837213:53
openstackgerritHenrique Truta proposed openstack/keystone: Add is_domain parameter to get_project_by_name  https://review.openstack.org/21060013:53
samueldmqdstanek, I rewrote all the commit messages .. could you give it a pass and see if they make sense/are better now?13:58
samueldmqdstanek, https://etherpad.openstack.org/p/policy-patches13:58
samueldmqdstanek, (they're much smaller now)13:58
*** tiny-hands has joined #openstack-keystone14:00
dstaneksamueldmq: looks much better14:01
samueldmqdstanek, yeah, the messages are more meaningful :)14:01
samueldmqdstanek, and the way I split the patches, does it make sense ?14:02
dstaneksamueldmq: i think so - i think it'll be more obvious as i review them14:02
*** ramishra has joined #openstack-keystone14:02
samueldmqdstanek, great, I am going to give them an update14:03
samueldmqdstanek, thanks !14:03
*** piyanai has joined #openstack-keystone14:03
*** dims has quit IRC14:04
*** dims has joined #openstack-keystone14:05
*** topol has joined #openstack-keystone14:05
*** ChanServ sets mode: +v topol14:05
*** topol has quit IRC14:05
*** topol has joined #openstack-keystone14:06
*** ChanServ sets mode: +v topol14:06
*** phalmos has joined #openstack-keystone14:06
*** jecarey has joined #openstack-keystone14:11
*** sigmavirus24_awa is now known as sigmavirus2414:11
*** pnavarro|lunch is now known as pnavarro14:14
*** hafe1 has quit IRC14:18
*** urulama has quit IRC14:19
*** urulama has joined #openstack-keystone14:19
*** HT_sergio has joined #openstack-keystone14:19
*** shoutm has quit IRC14:20
*** fhubik has joined #openstack-keystone14:21
*** yottatsa has joined #openstack-keystone14:24
*** fhubik_ has joined #openstack-keystone14:25
*** jasonsb has quit IRC14:26
*** afazkas has quit IRC14:27
*** Protux has joined #openstack-keystone14:28
*** fhubik is now known as fhubik_brb14:30
*** kiran-r has joined #openstack-keystone14:31
*** kiran-r has quit IRC14:31
*** kiran-r has joined #openstack-keystone14:31
*** stevemar has joined #openstack-keystone14:32
*** ChanServ sets mode: +v stevemar14:32
*** kiran-r has quit IRC14:33
openstackgerritBrant Knudson proposed openstack/keystone: Use wsgi_scripts to create admin and public httpd files  https://review.openstack.org/19444214:33
openstackgerritBrant Knudson proposed openstack/keystone: Update Httpd configuration docs for sites-available/enabled  https://review.openstack.org/20802514:33
*** kiran-r has joined #openstack-keystone14:33
*** pnavarro has quit IRC14:34
*** yottatsa has quit IRC14:35
*** dims_ has joined #openstack-keystone14:35
*** dims has quit IRC14:37
*** divya__ has joined #openstack-keystone14:38
*** stevemar has quit IRC14:39
*** stevemar has joined #openstack-keystone14:39
*** ChanServ sets mode: +v stevemar14:39
*** dikonoo has quit IRC14:41
openstackgerritBrant Knudson proposed openstack/keystone: Use extras for memcache and MongoDB packages  https://review.openstack.org/20762014:41
openstackgerritBrant Knudson proposed openstack/keystone: Extras for bandit  https://review.openstack.org/20764514:41
*** phalmos has quit IRC14:42
stevemarbknudson: why'd you have to go and put the package on one line, and the version on another!14:44
stevemaroh wait, nvm114:45
stevemar!14:45
openstackgerritJun Jie Nan proposed openstack/pycadf: Fixed typo error  https://review.openstack.org/21422714:48
*** phalmos has joined #openstack-keystone14:50
*** narengan has joined #openstack-keystone14:53
*** piyanai has quit IRC14:53
*** Kiall_ has joined #openstack-keystone14:57
*** zzzeek has joined #openstack-keystone14:58
*** dan_ has joined #openstack-keystone14:58
*** piyanai has joined #openstack-keystone14:58
*** dan_ is now known as Guest3405114:58
*** stevemar has quit IRC14:59
*** fangzhou has quit IRC14:59
*** tobasco_ has quit IRC14:59
*** Kiall has quit IRC14:59
*** rharwood has quit IRC14:59
*** dan has quit IRC14:59
*** jorge_munoz has quit IRC14:59
*** Guest34051 is now known as dan14:59
*** tobasco has joined #openstack-keystone14:59
*** dims has joined #openstack-keystone15:01
*** dims_ has quit IRC15:03
*** stevemar has joined #openstack-keystone15:05
*** ChanServ sets mode: +v stevemar15:05
*** fangzhou has joined #openstack-keystone15:06
*** doug-fish has joined #openstack-keystone15:08
*** fhubik_ has quit IRC15:09
*** fhubik_brb has quit IRC15:09
*** phalmos has quit IRC15:09
*** rharwood has joined #openstack-keystone15:12
*** phalmos has joined #openstack-keystone15:17
*** woodster_ has joined #openstack-keystone15:18
*** fangzhou_ has joined #openstack-keystone15:27
*** fangzhou has quit IRC15:27
*** fangzhou_ is now known as fangzhou15:27
*** dims has quit IRC15:29
*** dims has joined #openstack-keystone15:30
*** pnavarro has joined #openstack-keystone15:30
openstackgerritNikita Konovalov proposed openstack/python-keystoneclient: Fix logging of binray contentent in request  https://review.openstack.org/18351415:31
*** _kiran_ has joined #openstack-keystone15:32
openstackgerritNikita Konovalov proposed openstack/python-keystoneclient: Fix logging of binray contentent in request  https://review.openstack.org/18351415:32
*** kiran-r has quit IRC15:33
*** yottatsa has joined #openstack-keystone15:33
*** yottatsa has quit IRC15:34
*** browne has quit IRC15:34
*** samueldmq has quit IRC15:35
*** pnavarro has quit IRC15:36
*** pnavarro has joined #openstack-keystone15:36
*** woodster_ has quit IRC15:36
*** ramishra has quit IRC15:36
*** Protux has quit IRC15:36
*** roxanaghe has joined #openstack-keystone15:36
*** btully has joined #openstack-keystone15:37
bknudsondstanek: why -1 on https://review.openstack.org/#/c/212515/ ? Because of the old jenkins failure?15:37
dstanekbknudson: yes, did we get a fix merged in front of it? or was there some other magic involved?15:39
*** phalmos has quit IRC15:39
*** yottatsa has joined #openstack-keystone15:39
bknudsondstanek: https://review.openstack.org/#/c/207973/ is merged now15:39
*** browne has joined #openstack-keystone15:41
dstanekbknudson: revoted15:41
*** jasonsb has joined #openstack-keystone15:42
*** rm_work is now known as rm_work|away15:43
*** yottatsa has quit IRC15:43
*** jecarey has quit IRC15:43
*** dims has quit IRC15:45
*** geoffarnold has joined #openstack-keystone15:46
*** dims has joined #openstack-keystone15:47
*** btully has quit IRC15:48
*** piyanai has quit IRC15:48
*** _kiran_ has quit IRC15:50
*** geoffarnold has quit IRC15:50
*** geoffarnold has joined #openstack-keystone15:50
openstackgerritMerged openstack/keystone: Show helpful message when request body is not provided  https://review.openstack.org/19590315:51
*** afazkas has joined #openstack-keystone15:51
*** _cjones_ has joined #openstack-keystone15:53
*** mestery has joined #openstack-keystone15:54
*** yottatsa has joined #openstack-keystone15:54
*** samueldmq has joined #openstack-keystone15:57
*** piyanai has joined #openstack-keystone15:58
*** lsmola has quit IRC16:00
*** woodster_ has joined #openstack-keystone16:03
*** jecarey has joined #openstack-keystone16:04
*** yottatsa has quit IRC16:05
*** yottatsa has joined #openstack-keystone16:07
*** jistr has quit IRC16:08
*** ramishra has joined #openstack-keystone16:12
*** yottatsa has quit IRC16:23
*** yottatsa has joined #openstack-keystone16:24
*** yottatsa has quit IRC16:25
openstackgerritPaweł Pamuła proposed openstack/keystone: IdP deletion triggers token invalidation  https://review.openstack.org/21310416:25
*** geoffarnold has quit IRC16:27
*** phalmos has joined #openstack-keystone16:27
*** rm_work|away is now known as rm_work16:27
*** petertr7 is now known as petertr7_away16:28
*** yottatsa has joined #openstack-keystone16:30
*** yottatsa has quit IRC16:31
*** yottatsa has joined #openstack-keystone16:32
*** yottatsa has quit IRC16:32
*** doug-fish has quit IRC16:32
*** doug-fish has joined #openstack-keystone16:33
*** yottatsa has joined #openstack-keystone16:33
*** Protux has joined #openstack-keystone16:34
openstackgerritHenrique Truta proposed openstack/keystone: Limit subtree and parents queries  https://review.openstack.org/20913216:35
*** Ephur has joined #openstack-keystone16:35
*** lhcheng has joined #openstack-keystone16:36
*** ChanServ sets mode: +v lhcheng16:36
*** dims has quit IRC16:36
*** mylu has joined #openstack-keystone16:37
*** dims has joined #openstack-keystone16:39
*** phalmos has quit IRC16:39
*** mylu has quit IRC16:40
*** mylu has joined #openstack-keystone16:41
*** afazkas has quit IRC16:42
*** mylu has quit IRC16:45
*** mylu has joined #openstack-keystone16:45
*** doug-fish has quit IRC16:46
*** doug-fish has joined #openstack-keystone16:46
*** phalmos has joined #openstack-keystone16:51
*** piyanai has quit IRC16:52
*** dims has quit IRC16:54
*** lhcheng has quit IRC16:57
*** dims has joined #openstack-keystone16:57
*** lhcheng has joined #openstack-keystone16:57
*** ChanServ sets mode: +v lhcheng16:57
*** lhcheng has quit IRC17:02
*** yottatsa has quit IRC17:02
*** piyanai has joined #openstack-keystone17:02
*** dims_ has joined #openstack-keystone17:02
*** dims has quit IRC17:04
*** browne has quit IRC17:05
*** lhcheng has joined #openstack-keystone17:05
*** ChanServ sets mode: +v lhcheng17:05
*** mestery has quit IRC17:07
*** narengan has quit IRC17:07
*** dims has joined #openstack-keystone17:08
*** dims_ has quit IRC17:09
*** divya__ has quit IRC17:09
*** kiran-r has joined #openstack-keystone17:11
openstackgerritMerged openstack/pycadf: Fixed typo error  https://review.openstack.org/21422717:11
*** dims_ has joined #openstack-keystone17:11
*** ankita_wagh has joined #openstack-keystone17:13
*** dims has quit IRC17:14
*** kiran-r has quit IRC17:16
*** yottatsa has joined #openstack-keystone17:16
*** ayoung has quit IRC17:17
*** dims_ has quit IRC17:20
*** boris-42 has quit IRC17:20
*** dims has joined #openstack-keystone17:20
*** dims has quit IRC17:20
*** piyanai has quit IRC17:21
*** dims has joined #openstack-keystone17:21
*** vivekd has joined #openstack-keystone17:22
openstackgerritSean Perry proposed openstack/keystone: Prevent exception for invalidly encoded parameters  https://review.openstack.org/21379617:22
*** geoffarnold has joined #openstack-keystone17:22
openstackgerritDavid Stanek proposed openstack/keystone: Adds warning when no domain configs were uploaded  https://review.openstack.org/21428717:24
*** fangzhou has quit IRC17:25
samueldmqdstanek, for-else statement ?17:26
samueldmqdstanek, what is that num_uploaded for ?17:26
*** lhcheng has quit IRC17:27
dstaneksamueldmq: oh, damn. i forgot that many people here don't like for-else17:30
dstaneksamueldmq: that should have been changed anyway i think that i may have messed up a rebase17:30
samueldmqdstanek, you made me to not like it with your hacking-check :p17:30
samueldmqdstanek, I didn't even know about for-else statements, to be honest ehhe17:31
dstaneksamueldmq: yep, thanks for the warning - the change got foobared in a rebase17:32
samueldmqdstanek, np :)17:34
*** phalmos has quit IRC17:34
openstackgerritDavid Stanek proposed openstack/keystone: Adds warning when no domain configs were uploaded  https://review.openstack.org/21428717:34
*** phalmos has joined #openstack-keystone17:35
*** piyanai has joined #openstack-keystone17:41
*** henrynash has joined #openstack-keystone17:42
*** ChanServ sets mode: +v henrynash17:42
*** geoffarnold has quit IRC17:45
*** geoffarnold has joined #openstack-keystone17:47
openstackgerritVivek Dhayaal proposed openstack/keystone: Stable Keystone Driver Interfaces  https://review.openstack.org/20952417:47
*** ngupta_ has joined #openstack-keystone17:47
*** shaleh has joined #openstack-keystone17:48
*** petertr7_away is now known as petertr717:50
*** browne has joined #openstack-keystone17:50
*** ngupta has quit IRC17:51
*** piyanai has quit IRC17:52
jasonsbis there a guide for using keystone v3 with nova/glance/neutron in juno?17:53
jasonsbi am getting:  Invalid user token. Keystone response: {u'error': {u'message': u'Non-default domain is not supported (Disable debug mode to suppress these details.)', u'code': 401, u'title': u'Unauthorized'}}17:53
jasonsbi am using recent openstack client and passing OS_USER_DOMAIN_NAME, OS_PROJECT_NAME, OS_PROJECT_DOMAIN_NAME for ldap-backed domain17:55
jasonsbgetting this error for openstack network list17:57
bretonjasonsb: I think you are trying to validate a v3 token with non-default domain via v217:57
bretonjasonsb: are you using latest keystone or keystone from juno?17:57
jasonsbjuno keystone17:58
jasonsbi tried identity endpoint of no version and also /v317:58
jasonsbdidn't notice any difference17:58
*** gordc has quit IRC17:59
jasonsbi also tried from a kilo system to just install openstackclient and keystoneclient17:59
jasonsbdidn't appear to change behavior, but i haven't compared against juno carefully18:00
jasonsbinterestingly, if i try netowrk list as admin user it works18:02
*** ayoung has joined #openstack-keystone18:03
*** ChanServ sets mode: +v ayoung18:03
jasonsb(my admin user is in default domain)18:03
*** mylu has quit IRC18:03
*** roxanaghe has quit IRC18:03
jasonsbbreton: thank you for your help18:03
*** chlong has quit IRC18:06
*** fangzhou has joined #openstack-keystone18:06
*** gordc has joined #openstack-keystone18:07
bretonit would be great if you could verify your issue on stable/kilo or on master branch and make a bugreport.18:07
*** piyanai has joined #openstack-keystone18:08
*** gyee has joined #openstack-keystone18:08
*** ChanServ sets mode: +v gyee18:08
samueldmqgyee, hey!18:09
gyeesamueldmq, hello18:09
*** chlong has joined #openstack-keystone18:09
samueldmqgyee, is the ops-meetup happening today ?18:09
gyeeyes18:09
gyeelike right now18:09
samueldmqgyee, I just would like to remember you to get some feedback on our policy distribution approach over HTTP18:09
samueldmqgyee, if possible :)18:10
gyeeI did raise the issue on policy and adminness18:10
gyeewe may get a breakout session18:10
gyeestay tune18:10
* gyee is blogging live from the ops midcycle18:11
*** openstackgerrit_ has quit IRC18:11
samueldmqgyee, ++18:11
samueldmqgyee, nice thanks :)18:11
* samueldmq is waiting for good news, and tuned for any question18:11
gyeemorgan_2549 is also here, and he shaved!18:12
samueldmqgyee, basically, we need to know the operator's thoughts on using HTTP and the possible inconsistencies to validate our solution18:12
samueldmqgyee, nice, morgan_2549 can help as well in the discussions I think, as the original idea of cache control at keystone-server was from him18:13
samueldmqo/18:13
*** yottatsa has quit IRC18:13
openstackgerritMerged openstack/keystone: Remove unnecessary check  https://review.openstack.org/21400918:15
openstackgerrithenry-nash proposed openstack/keystone: Add support for data-driven backend assignment testing  https://review.openstack.org/14917818:16
openstackgerrithenry-nash proposed openstack/keystone: Rationalize unfiltered list role assignment test  https://review.openstack.org/21382018:16
lbragstadjamielennox: want to sync up after the meeting, and break up things up?18:16
*** c_soukup has joined #openstack-keystone18:16
jamielennoxlbragstad: yea, i'm here for the next while18:16
lbragstadjamielennox: I understand it's early there so let me know what works for you18:16
*** geoffarnold has quit IRC18:17
*** geoffarnold has joined #openstack-keystone18:18
*** yottatsa has joined #openstack-keystone18:18
*** csoukup has quit IRC18:18
openstackgerritTerry Howe proposed openstack/keystoneauth: Clean up exception messages  https://review.openstack.org/21429518:18
vivekdgyee: gentle reminder on the stable-driver-interfaces patch. you had said last friday you had it in your to-do list for that day.18:24
vivekdgyee: I'm awaiting your review comments...18:24
*** yottatsa has quit IRC18:24
gyeevivekd, turns out last friday is shorter than usual, looking now18:25
gyeewas18:25
vivekdgyee: thank you! sorry to pester u. feature freeze is rapidly approaching. hence reminded u.18:27
*** geoffarnold has quit IRC18:28
sigmavirus24bknudson: hate to bug you, but do you remember the alternative to rootwrap that you mentioned last week?18:28
bknudsonsigmavirus24: https://review.openstack.org/#/c/204073/18:29
sigmavirus24Thanks!18:29
*** gyee has quit IRC18:31
*** gyee has joined #openstack-keystone18:32
*** ChanServ sets mode: +v gyee18:32
vivekdgyee: also, fyi, we've have completed the nosql driver for keystone.18:33
vivekdgyee: we're awaiting the stable-driver-interfaces completion to submit our cassandra driver upstream18:33
gyeevivekd, cassandra driver will be out-of-tree right?18:33
vivekdgyee: yes18:34
openstackgerrithenry-nash proposed openstack/keystone: Add support for effective & inherited mode in data driven tests  https://review.openstack.org/15162318:34
vivekdgyee: along with your mongo driver i guess18:34
gyeeyes18:34
vivekdgyee: any idea of the plan? like...do we create a new git repo and commit both our drivers there?18:35
gyeevivekd, I don't know yet. Let me talk to morgan_254918:36
vivekdgyee: ok. pls keep me posted18:36
*** gordc has quit IRC18:40
*** geoffarnold has joined #openstack-keystone18:40
*** urulama has quit IRC18:42
*** urulama has joined #openstack-keystone18:43
*** piyanai has quit IRC18:44
*** piyanai has joined #openstack-keystone18:45
*** piyanai has quit IRC18:45
*** samueldmq has quit IRC18:46
*** mylu has joined #openstack-keystone18:46
*** narengan has joined #openstack-keystone18:50
*** mylu has quit IRC18:53
*** mylu has joined #openstack-keystone18:54
openstackgerrithenry-nash proposed openstack/keystone: Add support for group membership to data driven assignment tests  https://review.openstack.org/15196218:55
*** mylu_ has joined #openstack-keystone18:55
*** mylu has quit IRC18:56
*** pnavarro has quit IRC18:56
*** geoffarnold has quit IRC18:56
*** mylu_ has quit IRC18:58
*** roxanaghe has joined #openstack-keystone18:58
*** mylu has joined #openstack-keystone18:59
openstackgerritRodrigo Duarte proposed openstack/keystone: Add is_domain field in Project Table  https://review.openstack.org/21327318:59
jamielennoxbknudson: we're pushing to get keystoneauth finished, at which point the distinction should at least be more clear19:00
jamielennoxi know i've at least abandoned anything in keystoneclient that touches session/auth19:00
*** gyee has quit IRC19:00
bknudsonjamielennox: ok, I'm concerned that changes are being made to "keystoneauth" stuff in keystoneclient but then aren't being picked over19:01
*** mylu has quit IRC19:01
bknudsonmaybe it was just the change to the fixture19:01
*** mylu has joined #openstack-keystone19:01
jamielennoxso as soon as we can declare keystoneauth ready then we stop accepting fixes to the copied portions of keystoneclient19:01
openstackgerrithenry-nash proposed openstack/keystone: Add support for group membership to data driven assignment tests  https://review.openstack.org/15196219:01
jamielennoxbut it just became a blocker to doing keystoneauth correctly to try and make it so that keystoneclient 1 could consume it without breaking compatibility19:02
bknudsonI don't think we should declare keystoneauth ready until at least the keystoneauth_integration feature branch works.19:02
*** samueldmq has joined #openstack-keystone19:02
stevemarjamielennox: whatever happened to the block around the oslo.config work for ksa?19:02
jamielennoxmy understanding is that keystoneauth_integration will be declared keystoneclient 2 early next cycle, removing CLI, removing all session stuff and relying on keystoneauth19:03
jamielennoxso yes it'll work it just wont look like current keystoneclient19:03
jamielennoxstevemar: what do you mean?19:04
dstanekhas anyone noticed the number of bugs keeps creeping up?19:04
openstackgerrithenry-nash proposed openstack/keystone: Broaden domain-group testing of list_role_assignments  https://review.openstack.org/15430219:04
stevemarjamielennox: from what i recall, morgan_2549 was talking about that being a blocker before we release ksa (at the mid cycle)19:04
stevemari might have old news19:04
bknudsondstanek: yes, we keep adding new features.19:04
jamielennoxstevemar: ah, ok, fixed19:04
*** shaleh has quit IRC19:04
jamielennoxstevemar: https://github.com/openstack/keystoneauth/blob/master/keystoneauth1/loading/opts.py is our new option format - which is really close to oslo.cfg opts19:05
*** e0ne has joined #openstack-keystone19:08
*** ayoung has quit IRC19:08
jamielennoxlbragstad: so how do you want to do this?19:10
jamielennoxlbragstad: from a code perspective i think it'll be fairly simple19:10
*** kiran-r has joined #openstack-keystone19:10
jamielennoxwhat i want to make sure is that for mod_auth_mellon, shib and kerberos it works so that having /{idp_id}/protocols/{protocol}/websso configured it doesn't get in the way of using /auth for CLI19:11
*** _kiran_ has joined #openstack-keystone19:11
jamielennoxif anything i expect it to make that way simpler19:11
*** kiran-r has quit IRC19:13
lbragstadjamielennox: should we just start with adding the path/call?19:14
*** mylu has quit IRC19:14
lbragstadjamielennox: or do you supect prereq work?19:14
roxanaghebknudson, any hints on how to deprecate a default value?19:14
*** mylu has joined #openstack-keystone19:14
jamielennoxi think either way we're going to need the code to test it19:14
jamielennoxlbragstad: give me today to try and get the keystone side done, we can figure out practical testing tomorrow19:15
dstanekroxanaghe: can you detect that an explicit value wasn't being set?19:15
jamielennox(assuming you don't have any code)19:16
roxanaghedstanek, yes, I can19:16
dstanekroxanaghe: then you can say in X releases this will be changed ...19:16
roxanagheyou mean a message in keystone log?19:16
roxanaghedstanek ^^19:16
dstanekroxanaghe: tbh i'm not sure what the deprecation strategy is for ksc. i think there are a few different mechanisms in use19:19
dstanekroxanaghe: take a look and see if that's still the case19:19
roxanaghedstanek, ok, I think I saw some deprecation messages in the logs so that might be one strategy19:20
roxanaghebut I'll take a more 'eager' look19:20
lbragstadjamielennox: I don't have any code atm19:21
dstaneklbragstad: that sounds like a personal problem :-)19:21
lbragstaddstanek: ++19:21
*** mylu has quit IRC19:23
*** mylu has joined #openstack-keystone19:23
*** doug-fish has quit IRC19:26
*** doug-fish has joined #openstack-keystone19:27
*** mylu has quit IRC19:27
lbragstadjamielennox: let me know what you get something up, and if you have a list of things to work on in the commit message, I'll start picking stuff19:28
jamielennoxlbragstad: will do19:29
*** geoffarnold has joined #openstack-keystone19:30
*** mylu has joined #openstack-keystone19:36
*** belmoreira has joined #openstack-keystone19:36
*** geoffarnold has quit IRC19:38
*** geoffarnold has joined #openstack-keystone19:38
rodrigodsdstanek, have some space in the review list for https://review.openstack.org/#/c/213273/ ? :)19:40
*** csoukup has joined #openstack-keystone19:42
*** c_soukup has quit IRC19:43
*** mestery has joined #openstack-keystone19:44
*** e0ne has quit IRC19:44
*** jasonsb has quit IRC19:47
*** gordc has joined #openstack-keystone19:50
*** belmoreira has quit IRC19:51
*** ayoung has joined #openstack-keystone19:51
*** ChanServ sets mode: +v ayoung19:51
*** jasonsb has joined #openstack-keystone19:56
*** roxanaghe has quit IRC19:56
*** sigmavirus24 is now known as sigmavirus24_awa19:57
*** sigmavirus24_awa is now known as sigmavirus2419:58
*** Qlawy has quit IRC19:59
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Create unit tests for the policy backend  https://review.openstack.org/21295720:00
*** vivekd has quit IRC20:01
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Create policy cache table  https://review.openstack.org/21167920:01
*** ankita_w_ has joined #openstack-keystone20:01
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Provide function to cache policies  https://review.openstack.org/21295920:01
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Calculate validity and control caching  https://review.openstack.org/20969520:01
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Insert Cache-Control header into HTTP response  https://review.openstack.org/21127120:01
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Manager: Calculate validity and control caching  https://review.openstack.org/21296020:03
rodrigodsayoung, can you review the first patch from reseller whenever you have some time? https://review.openstack.org/#/c/213273/20:03
openstackgerritDavid Stanek proposed openstack/keystone: Adds warning when no domain configs were uploaded  https://review.openstack.org/21428720:03
*** ankita_wagh has quit IRC20:04
*** ankita_wagh has joined #openstack-keystone20:04
*** Qlawy has joined #openstack-keystone20:04
*** HT_sergio has quit IRC20:05
*** ankita_w_ has quit IRC20:07
*** HT_sergio has joined #openstack-keystone20:07
*** mestery has quit IRC20:08
*** Qlawy has quit IRC20:09
*** petertr7 is now known as petertr7_away20:09
*** samueldmq has quit IRC20:10
*** mestery has joined #openstack-keystone20:10
*** mylu has quit IRC20:17
*** boris-42 has joined #openstack-keystone20:19
*** btully has joined #openstack-keystone20:19
ayoungrodrigods, try to get to it tonight20:19
rodrigodsayoung, thanks a lot! :)20:20
*** roxanaghe has joined #openstack-keystone20:23
*** geoffarnold has quit IRC20:30
*** geoffarnold has joined #openstack-keystone20:30
dstanekrodrigods: sure, i should be able to get to it a little later20:31
*** Navid_ has joined #openstack-keystone20:31
openstackgerritMerged openstack/keystone: Use extras for memcache and MongoDB packages  https://review.openstack.org/20762020:32
*** urulama has quit IRC20:33
*** urulama has joined #openstack-keystone20:33
*** piyanai has joined #openstack-keystone20:33
rodrigodsdstanek, thx! :) (hope to get the first patch in this week)20:37
*** sbezverk has joined #openstack-keystone20:41
*** piyanai has quit IRC20:41
*** mylu has joined #openstack-keystone20:41
*** lhcheng has joined #openstack-keystone20:42
*** ChanServ sets mode: +v lhcheng20:42
sbezverkHello, I am looking for some help. On brand new test bed with IceHouse, brought up with packstack, keystone database user table is missing two columns. Any suggestions where to start looking?20:42
*** hrou has quit IRC20:43
*** gyee has joined #openstack-keystone20:43
*** ChanServ sets mode: +v gyee20:43
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file  https://review.openstack.org/21433920:46
*** ctina has quit IRC20:49
*** topol has quit IRC20:49
*** mylu has quit IRC20:50
dstaneksbezverk: that sounds awful. what columns are missing?20:52
*** _kiran_ has quit IRC20:53
*** lhcheng_ has joined #openstack-keystone20:54
sbezverk<+dstanek> user.domain_id  and user.default_project_id I have checked on another properly installed Icehouse and these columns are there..20:57
*** lhcheng has quit IRC20:57
dstaneksbezverk: i'm pretty sure that at lease user.domain_id was after icehouse20:59
dstaneksbezverk: has the other icehouse installation you were looking at been updated at all?20:59
dstaneks/lease/least/21:00
*** pnavarro has joined #openstack-keystone21:02
openstackgerritDavid Stanek proposed openstack/keystone: Refactor: use fixtures.TempDir more  https://review.openstack.org/21434621:03
dstaneksbezverk: nope, it looks like that's been there for quite a while. i'm not very familiar with packstack21:04
*** stevemar has quit IRC21:05
*** pnavarro has quit IRC21:07
sbezverk<+dstanek> We are suspecting that Red Hat introduced new bug in packstack for Icehouse or latest keystone package for icehouse, but still waiting from them to confirm..21:08
*** raildo is now known as raildo-afk21:09
*** stevemar has joined #openstack-keystone21:16
*** ChanServ sets mode: +v stevemar21:16
*** jecarey has quit IRC21:17
*** phalmos has quit IRC21:18
*** pnavarro has joined #openstack-keystone21:18
*** doug-fish has quit IRC21:22
*** doug-fish has joined #openstack-keystone21:22
*** yottatsa has joined #openstack-keystone21:23
*** mestery has quit IRC21:25
*** ngupta_ has quit IRC21:28
*** jecarey has joined #openstack-keystone21:30
*** shaleh has joined #openstack-keystone21:31
*** dave-mcc_ has joined #openstack-keystone21:33
*** tiny-hands has quit IRC21:36
*** stevemar has quit IRC21:36
*** Navid_ has quit IRC21:36
*** dave-mccowan has quit IRC21:36
*** geoffarnold has quit IRC21:37
*** mpmsimo has joined #openstack-keystone21:38
jamielennoxthey would never!21:40
dolphmdoes this fail for anyone else? $ git review -d 208069; git review -d 213216;21:41
dolphm(in keystone)21:41
dstanekdolphm: is there anything we can do about https://bugs.launchpad.net/keystone/+bug/1101404 or was it fixed by the oslo_log fix?21:42
openstackLaunchpad bug 1101404 in OpenStack Compute (nova) "nova syslog logging to /dev/log race condition in python 2.6 and 2.7" [Medium,Confirmed]21:42
openstackgerrithenry-nash proposed openstack/keystone: Test list_role_assignment in standard inheritance tests  https://review.openstack.org/15389721:42
dstanekdolphm: i ran ' git review -d 208069; git review -d 213216;' and didn't get any errors21:42
*** sileht has quit IRC21:43
*** dave-mccowan has joined #openstack-keystone21:43
dolphmdstanek: i don't think so, especially now that oslo.log is an external project21:44
*** HT_sergio has quit IRC21:44
*** edmondsw has quit IRC21:44
dstanekdolphm: that's what i though. was going to mark as invalid saying that there was no keystone work that needs to be done, but wasn't entirely sure21:44
henrynashcores: I have a long series of patches that beef up our manager assignment testing…they’ve been posted for a while and it would be great to get these in…..once they’re merged we can rationallize a number of the assignment related methods.  They start at: https://review.openstack.org/#/c/149178/4121:46
*** dave-mcc_ has quit IRC21:46
dolphmdstanek: i commented as much -- close it against the other projects too21:46
*** ankita_w_ has joined #openstack-keystone21:46
dolphmhenrynash: what about https://review.openstack.org/#/c/213820/ ?21:46
henrynashdolphm: oops, how right you are sir, they start there!21:47
dolphmhenrynash: i added them to https://gist.github.com/dolph/651c6a1748f69637abd0 if they weren't already there21:49
henrynashdolphm: thx21:49
*** csoukup has quit IRC21:49
*** ankita_wagh has quit IRC21:50
dolphmdstanek: i'm running into this... http://cdn.pasteraw.com/earae3rgf3rhrbogo2589mpur83epcm21:50
*** pnavarro has quit IRC21:50
dolphmdstanek: and then my git status makes no sense http://cdn.pasteraw.com/kq18lka08caaxnl0khcxm7lg41gx9wi21:51
*** jecarey has quit IRC21:53
*** hrou has joined #openstack-keystone21:57
*** mpmsimo has quit IRC21:59
roxanaghehi @dolphm, I would like to backport this bug fix: https://bugs.launchpad.net/oslo.config/+bug/1461299 to stable/kilo. Do I need an approval for that or I can just submit a review?21:59
openstackLaunchpad bug 1461299 in Keystone "Failure on list users when using ldap domain configuration from database" [Undecided,Fix committed] - Assigned to Roxana Gherle (roxana-gherle)21:59
roxanaghe@dolphm, you added that tag kilo_backport_potential so I thought I could ask you :)22:00
dolphmroxanaghe: as long as the patch has been merged to master, feel free to propose the backport22:00
dolphmroxanaghe: i'll add tracking for kilo on launchpad and remove the -potential tag22:00
roxanaghedolphm, great thanks22:01
dolphmroxanaghe: if you want to backport something, the only gotcha is proposing the backport before the patch to master is merged. we'll -2 the backport to hold it until the patch to master is merged, and then remove the -2 to open the backport for review. we just want to ensure that things land in master first, and that stable/* reflects what's in master.22:03
*** btully has quit IRC22:04
*** doug-fish has quit IRC22:05
*** gyee has quit IRC22:06
*** ankita_wagh has joined #openstack-keystone22:07
*** dsirrine has quit IRC22:08
*** btully has joined #openstack-keystone22:08
*** shoutm has joined #openstack-keystone22:09
*** ankita_w_ has quit IRC22:10
*** zzzeek has quit IRC22:11
roxanaghedolphm, ok I see. what about if my backport is dependent on a backport on another project (in my case oslo.config). I should submit an oslo.config backport first and make the keystone one dependent?22:13
*** Navid_ has joined #openstack-keystone22:14
*** yottatsa has quit IRC22:15
*** samueldmq has joined #openstack-keystone22:17
*** sigmavirus24 is now known as sigmavirus24_awa22:18
dstanekdolphm: that's odd22:19
*** dsirrine has joined #openstack-keystone22:20
dstanekdolphm: what does HEAD point to for you?22:20
dstanek"git symbolic-ref -q HEAD"22:21
*** samueldmq has quit IRC22:21
*** asselin_ has joined #openstack-keystone22:24
asselin_Hi keystone folks. My 3rd party ci system is broken and I need some help to see what 'recent' change could have caused it. http://paste.openstack.org/show/421101/22:28
asselin_I'm using Juno openstack cloud22:28
*** mpmsimo has joined #openstack-keystone22:32
*** lhcheng_ has quit IRC22:34
*** mpmsimo has quit IRC22:35
*** mpmsimo has joined #openstack-keystone22:35
*** geoffarnold has joined #openstack-keystone22:35
*** gordc has quit IRC22:36
*** henrynash has quit IRC22:37
*** darrenc is now known as darrenc_afk22:40
*** Navid_ has quit IRC22:52
*** zzzeek has joined #openstack-keystone22:54
*** lhcheng has joined #openstack-keystone22:54
*** ChanServ sets mode: +v lhcheng22:54
*** darrenc_afk is now known as darrenc22:56
*** geoffarnold has quit IRC23:07
openstackgerritMerged openstack/keystone: Extras for bandit  https://review.openstack.org/20764523:08
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file  https://review.openstack.org/21433923:09
shalehI am getting a json schema validation error when I try to request a token over federation. How do I debug why it is failing?23:12
shaleh"Invalid input for field 'scope'"23:13
*** lhcheng has quit IRC23:14
*** gyee has joined #openstack-keystone23:15
*** ChanServ sets mode: +v gyee23:15
*** rm_work is now known as rm_work|away23:15
*** dims_ has joined #openstack-keystone23:20
*** dims has quit IRC23:22
*** geoffarnold has joined #openstack-keystone23:24
openstackgerritTerry Howe proposed openstack/keystoneauth: Do not log binary data during debug  https://review.openstack.org/21438023:24
*** zzzeek has quit IRC23:26
*** chlong has quit IRC23:29
openstackgerritBrant Knudson proposed openstack/keystone: Add user domain info on fernet validation  https://review.openstack.org/21374223:36
openstackgerritBrant Knudson proposed openstack/keystone: Add user_domain_id, project_domain_id to auth context  https://review.openstack.org/21379223:36
openstackgerritBrant Knudson proposed openstack/keystone: Fix docstring for common.authorization  https://review.openstack.org/21375223:36
openstackgerritBrant Knudson proposed openstack/keystone: Fernet payloads for federated scoped tokens.  https://review.openstack.org/20217623:36
openstackgerritBrant Knudson proposed openstack/keystone: Add unit tests for token_to_auth_context  https://review.openstack.org/21379723:36
openstackgerritBrant Knudson proposed openstack/keystone: Build oslo.context RequestContext  https://review.openstack.org/21359523:36
*** ankita_w_ has joined #openstack-keystone23:47
*** ankita_wagh has quit IRC23:47
*** rm_work|away is now known as rm_work23:47
*** mpmsimo has quit IRC23:48
gyeedstanek, morgan_2549, need your Python expertise on https://review.openstack.org/#/c/209524/23:48
*** geoffarnold has quit IRC23:49
gyeeI don't understand the need for COMPATIBILIZER class23:49
dstanekgyee: where's that defined?23:49
gyeedefining it everything doesn't seem right23:49
*** geoffarnold has joined #openstack-keystone23:49
gyeedstanek, in core.py everywhere23:49
*** narengan has quit IRC23:52
dstanekgyee: i have no idea what that is doing...or actually how it works23:53
dstanekgyee: i thought metaclass had to always be types23:53
gyeedstanek, yeah, I am not much of a Python dark magician23:54
gyeestill trying to figure out that it is doing23:54
gyeedstanek, from what I can tell, it is trying to make sure two things23:55
gyee1) INTERFACE_VERSION agrees with DRIVER_VERSION23:55
gyee2) the abstract methods matches23:55
gyeebut I don't know why it needs a compatibilizer object in order to inspect the methods23:57
*** samueldmq has joined #openstack-keystone23:59
samueldmqgyee, hey23:59
dstanekgyee: it's not even worth reading until there is some develop docs23:59
*** tiny-hands has joined #openstack-keystone23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!